ympervej86

PureDevs

Do you need a secure layer over your registration process to prevent malicious site interactions? Secure User Registration is a reliable security solution designed to protect both standard and WooCommerce user registrations against CSRF attacks and bot registrations. It includes advanced features such as custom nonce implementation, email or domain blocking, and Google reCAPTCHA integration.
Features include: 
– CSRF protection for user and WooCommerce registration forms. 
– Enable or disable custom nonce fields for registration forms. 
– Block specific emails or domains using a comma-separated list. 
– Integrate Google reCAPTCHA to mitigate bot registrations. 
– Customize error messages for invalid nonce, email/domain blocklist, and captcha errors.
<h3>External Services</h3>
This plugin integrates with <a href="https://www.google.com/recaptcha/about/" rel="nofollow ugc">Google reCAPTCHA</a> to protect your site from spam and abuse.
What the service is and what it is used for: 
Google reCAPTCHA is a free service that helps protect websites from spam and abuse by using advanced risk analysis techniques to tell humans and bots apart.
What data is sent and when: 
When a user interacts with the registration form where reCAPTCHA is enabled, the following data is collected and sent to Google:
<ul>
<li>User’s IP address</li>
<li>Browser and device information</li>
<li>Cookies</li>
<li>Mouse movements and keystrokes while interacting with the reCAPTCHA widget</li>
</ul>
This data is collected by Google when the reCAPTCHA challenge is displayed or solved, to determine whether the user is a human or a bot.
Links to terms of service and privacy policy: 
– <a href="https://policies.google.com/terms" rel="nofollow ugc">Google reCAPTCHA Terms of Service</a> 
– <a href="https://policies.google.com/privacy" rel="nofollow ugc">Google Privacy Policy</a>
Please review these policies to understand how Google processes this data.

Secure User Registration by PureDevs

The plugin enhances site security by implementing layers of protection to user registration forms, safeguarding the site from attacks like CSRF and au …

Ayesh Karunaratne

This plugin adds the “SameSite” cookie flag to WordPress’s authentication cookies. On supported browsers (all current IE, Edge, Chrome, and Firefox), this can effectively prevent all Cross-Site Request Forgery attacks throughout your WordPress site.
SameSite cookie flag support was added to PHP on version 7.3, but this plugin ships with a workaround to support all PHP versions WordPress supports.
There is no administrative UI provided: Activate this plugin, and you are all set!
You can configure the SameSite flag value from your WordPress configuration file. You cna pick a value from <code>Lax</code> (default), <code>Strict</code>, or <code>None</code>. You can read about <a href="https://php.watch/articles/PHP-Samesite-cookies" rel="nofollow ugc">SameSite cookies here</a>.
To configure the <code>SameSite</code> flag value, edit your WordPress configuration file (<code>wp-config.php</code>), and add the following lines right above <code>/** Sets up WordPress vars and included files. */</code>.
<pre><code>define( 'WP_SAMESITE_COOKIE', 'Lax' ); // Pick from 'Lax', 'Strict', or 'None'.
</code></pre>
Note that only the authentication cookies are affected. Regular cookies that your installed plugins set will not be affected, nor provide any meaningful value with <code>SameSite</code> flags.

SameSite Cookies

Wasted two days on this

I don't know why the Author created this plugin, It does not work, please remove it from the plugin library

The plugin doesn't work

CSRF-protection for authentication cookies. When enabled, this plugin makes sure the "SameSite" flag is set in authentication cookies.

Secure User Registration by PureDevs vs SameSite Cookies